python3Packages.gitpython: 3.1.33 -> 3.1.37

[chkno]

Description of changes

This version bump resolves https://nvd.nist.gov/vuln/detail/CVE-2023-41040

Changelogs:

• https://github.com/gitpython-developers/GitPython/blob/3.1.37/doc/source/changes.rst
  • 3.1.34 https://github.com/gitpython-developers/gitpython/milestone/64?closed=1
  • 3.1.35 https://github.com/gitpython-developers/gitpython/milestone/65?closed=1
    • Fix CVE-2023-41040 gitpython-developers/GitPython#1644
  • 3.1.36 https://github.com/gitpython-developers/gitpython/milestone/66?closed=1
  • 3.1.37 https://github.com/gitpython-developers/gitpython/milestone/67?closed=1
    • "properly fixes" CVE-2023-41040 / GHSA-cwvm-v4w8-q58c

Things done

• Built on platform(s)

  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin

• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)

• Tested, as applicable:

  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages

• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage

    8 packages failed to build:
    python310Packages.mmcv python310Packages.mmcv.dist python310Packages.skrl python310Packages.skrl.dist
    python311Packages.mmcv python311Packages.mmcv.dist python311Packages.skrl python311Packages.skrl.dist
  
    448 packages built: ...
  

  These build failures are probably not caused by this PR: I'm unable to build these packages on my machine with or without this change because the build fills ram and swap and then earlyoom kills it. :(

• Tested basic functionality of all binary files (usually in ./result/bin/)

• 23.11 Release Notes (or backporting 23.05 Release notes)

  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module

• Fits CONTRIBUTING.md.

FYI: @fabaff, maintainer

[risicle]

Looks like they're still refining the patch and 3.1.37 will be out v soon with a better fix.

[LeSuisse]

3.1.37 was released with a "proper fix": https://github.com/gitpython-developers/GitPython/releases/tag/3.1.37

[chkno]

Cool. I've updated this to bump to 3.1.37. Thanks.

[risicle]

nixpkgs-review reveals no new failures for me, macos 10.15 & nixos x86_64